Privacy policy

Last updated 22 September 2026

1. Who this policy is for

This privacy policy explains how NEUVEX LTD handles personal data when you use the website at https://neuvex.live, when you send an enquiry through the contact form, and when you email or telephone us about our work. NEUVEX LTD is an IT engineering and consulting company. The address published for correspondence is Unit 82a James Carter Road, Mildenhall, Bury St. Edmunds, IP28 7DE, United Kingdom. You can email info@neuvex.live or call +44 7781 492018.

Personal data means information that relates to an identified or identifiable person. A business name on its own is not personal data, but a name, a direct email address, a telephone number, or a message that describes a person’s role usually is. This policy is written for people who visit the site and for people who contact NEUVEX LTD. If a later contract with a client organisation deals with personal data in more detail, that contract applies to the engagement it covers, and this policy continues to describe the website and ordinary enquiries.

We have written this policy to be read by a person who is deciding whether to write to us, not as a substitute for advice about your own compliance duties. If you are a client asking us to build software that will process personal data of your staff or customers, the arrangement for that processing is a matter for the statement of work and, where required, a separate data processing record. This page does not appoint NEUVEX LTD as your processor merely because you have read it.

2. The law this policy refers to

NEUVEX LTD handles personal data in line with the United Kingdom General Data Protection Regulation, as it forms part of UK law, and the Data Protection Act 2018. Where we place information on your device, or read information from it, the Privacy and Electronic Communications Regulations also matter. Those rules are explained in the cookie policy, because this website’s use of storage is limited and specific.

The Information Commissioner’s Office is the UK supervisory authority. Its public address is Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, and its website is ico.org.uk. You may complain to the ICO if you believe your data has been handled unlawfully. We ask that you contact us first so that we can look at the issue, but you are not required to do so before you contact the ICO.

We do not publish a company registration number, a data protection registration number, or a named data protection officer on this website, because those details are not part of the information we are providing here. If a particular enquiry legally requires a named contact for data protection, write to info@neuvex.live and mark the message for the attention of privacy. We will reply from that address or by telephone using the number above.

3. What this policy covers, and what it does not

This policy covers the public website, the contact form on the homepage and on the contact page, email sent to info@neuvex.live, and telephone calls to +44 7781 492018 that relate to NEUVEX LTD’s services. It covers the local storage item used to remember that you have acknowledged the cookie notice. It covers ordinary business correspondence that follows an enquiry, up to the point where a written agreement takes over the operational detail of a project.

This policy does not describe personal data that a client places inside a system we are asked to design or build, except to say that such data is handled under the relevant agreement and not merely by visiting this website. It does not describe recruitment, because this website does not invite job applications. It does not describe a newsletter, a user account, or a client portal, because this website does not provide those things. If we later add a feature that collects a new kind of data, we will update this policy before we rely on that feature.

Pages on this website that describe services, such as custom software programming, computer systems design, IT consulting and advisory, enterprise software engineering, software architecture design, technical and scientific consulting, custom web and mobile app development, API and systems integration, legacy system modernization, cloud solutions and migration, dedicated development teams, and software maintenance and support, are descriptions of work. Reading them does not, by itself, send us personal data. Personal data enters the picture when you choose to contact us or when your device requests a page and a hosting environment records that request in the ordinary way described below.

4. Information you give us in an enquiry

The contact form asks for three things: your name, your email address, and a message. Those fields are required because we cannot reply usefully without knowing who wrote and how to answer. The form is submitted to contact.php on this website. If the message passes validation, we attempt to deliver it by email to info@neuvex.live, with your email address as the reply-to address. You may also email that address directly, or call the telephone number, instead of using the form.

Please do not include special category data in a first enquiry. Special category data includes information about health, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data used for identification, sex life, or sexual orientation. It also includes criminal offence data. Our services are business software and consulting. We do not need that kind of information to decide whether we can talk about a project. If you include it anyway, we will use it only as far as we must in order to read and answer your message, and we will not ask you to expand on it.

A message may, of course, describe a business problem. It might name colleagues, systems, or a workplace. Please send only what we need in order to understand the request. If you are writing on behalf of an organisation, say so, and use a business email address if you have one. We treat the person named in the form as the correspondent unless the message clearly says otherwise.

There is a hidden field on the form that people are not asked to fill in. It is there to reduce automated submissions. If that field contains text, we treat the submission as unwanted and do not email it onward. Do not put your real details only in that field; they will not be read as your enquiry.

5. Correspondence after the form

If we reply, the thread of emails, and any documents you then send, become part of the correspondence. That may include a description of your systems, a proposed scope, or your availability for a call. We use that material to answer you, to decide whether an engagement is something NEUVEX LTD can take on, and, if both sides wish to proceed, to prepare a proposal or a statement of work. We do not add enquiry addresses to a marketing list. A reply from us is a reply to your message, not an invitation onto a mailing programme.

Telephone calls are used for the same purpose. We do not operate a recorded call-centre service from this website, and this policy does not claim that calls are recorded. If a call ever needed to be recorded, we would tell you at the start of the recording. Notes of a call, if we make them, are kept with the correspondence so that the next message is accurate.

If an enquiry turns into paid work, the contract will say what is to be built or advised upon, what the client must provide, and how confidential material is to be handled. Personal data that is necessary for the contract, such as the name of a project contact and an invoicing email, is then processed because the contract requires it, or because we have a legitimate interest in administering the work and keeping records. The website form is only the front door.

6. Information we do not ask the website to collect

We do not ask you to create an account. We do not ask for a password, a payment card, a date of birth, or a government identifier through this website. We do not run a shop. We do not embed advertising. We do not use a third-party analytics product on these pages, and we do not place a tracking pixel for an advertising network. If that changes, this policy and the cookie policy will change first, and any non-essential storage will be explained before it is used.

We do not buy lists of contacts. We do not scrape websites for email addresses. We do not ask other visitors to tell us about you. If someone else includes your name in a message to us, we will use that reference only as far as it is needed to understand the message, and we will not contact you on the strength of it unless the message asks us to and doing so is appropriate.

The work pages on this site describe kinds of engagement. They are not case studies of named clients, and they do not contain testimonials. You should not expect to find your organisation described here because you spoke to us. We do not publish client identities on this website.

7. Hosting and connection data

When your browser requests a page, the request travels to whatever hosting environment is serving neuvex.live. In the ordinary course of operating a website, a server may log the IP address of the connection, the date and time, the address of the page requested, a status code, the amount of data sent, and the user-agent string the browser sends. Those logs exist so that the site can be delivered, so that faults can be found, and so that obvious abuse, such as a flood of requests, can be limited.

NEUVEX LTD does not operate a separate analytics database of those logs for marketing. We do not use them to build a profile of your interests across other sites. We may look at a log if we need to diagnose a fault you report, or if we need to understand a security incident. An IP address can be personal data, particularly when it can be linked to a person. We treat logs with that in mind. The precise fields and the retention period used by a hosting provider are set by that provider’s systems. We choose providers that we expect to act on documented instructions where they process personal data for us, and we do not authorise them to use enquiry content for their own advertising.

Email sent to info@neuvex.live is handled by the mail system that receives mail for that domain. That system will process the headers of a message, including addresses, and the body, in order to deliver it. That processing is necessary for the correspondence you started. Do not send material to that address if you are not content for it to be received on a business mailbox used by NEUVEX LTD.

8. Local storage and the cookie notice

The cookie notice at the foot of the page can be dismissed. When you choose Acknowledge, the site writes a small item into the browser’s local storage under the key neuvex-cookie, with the value acknowledged. The purpose is narrow: so that the same browser does not show the notice on every page. The item does not contain your name, your email address, or the text of any message. It is not sent to us as the contents of a form. Clearing site data in your browser removes it, and the notice will appear again until you acknowledge it once more.

Local storage is not a cookie, but it is information stored on your device, so we describe it here and in the cookie policy. We do not use that item to recognise you across websites. We do not synchronise it with the contact form. If you never press Acknowledge, we do not write the item, and the notice remains available. The notice is not a gate. You can read the site and use the contact form whether or not you have dismissed it.

9. Why we use personal data, and the lawful basis

We use enquiry data to read what you asked, to reply, and to keep a record of that exchange. The lawful basis for taking the steps you asked for before a contract exists is that the processing is necessary in order to take steps at your request prior to entering into a contract, or, where you are writing for an organisation, necessary for our legitimate interest in responding to a business enquiry. Both descriptions often fit. We rely on the one that matches the message. A person writing about a possible engagement is asking us to consider work. Answering is the point of the form.

We have a legitimate interest in keeping a short record of what was said, so that we do not contradict an earlier reply, so that we can show what was requested if a question arises later, and so that we can protect the business against misuse of the form. We have considered that interest against the effect on the person writing. The data is the data the person chose to send. The effect of storing it in a mailbox is limited if we do not use it for unrelated marketing. We consider that balance to favour the limited use described in this policy. You may object to processing based on legitimate interests, as explained in the rights section. If you object, we will stop unless we have a compelling reason to continue, such as a legal claim that is already in prospect.

Where a contract is then formed, processing that is necessary to perform the contract, such as project correspondence with the named contact, rests on that contract. Where a law requires us to keep a record, for example a record that tax rules require a business to hold about a paid engagement, we keep it because of that legal obligation. We do not use consent as the basis for the contact form, because the form is a request for a reply, not an optional extra. Consent remains relevant if we ever ask to use your details for a purpose you can freely refuse without affecting the reply. We do not currently ask for that.

We do not use personal data from the website to make solely automated decisions that produce legal effects or similarly significant effects about you. A person reads enquiries. Validation of the form, which checks that a name, an email address, and a message are present and well formed, is a technical filter. It does not decide whether NEUVEX LTD will work with you.

10. Who we share information with

We do not sell personal data. We do not rent enquiry lists. We do not pass the contents of your message to an advertising partner. We share personal data only as far as it is needed for the purposes in this policy.

The people who need to see an enquiry are the people at NEUVEX LTD who answer it. A hosting provider may process connection data, and a mail provider may process the message, because that is how the site and the mailbox work. If we ask a professional adviser, such as a lawyer or an accountant, to look at a matter you have raised, we share only what that adviser needs. If a law, a court, or a competent authority requires disclosure, we disclose what is required and, where the law allows, we will tell you.

If we engage a supplier to help deliver a client project, and that supplier needs to see personal data that came from you, we do that under the contract for the project, not because you visited the website. Subcontracting of project work is described in the terms and conditions. It is not an open permission to circulate enquiry emails.

If NEUVEX LTD were ever to transfer its business, personal data that is part of the ordinary records of enquiries and contracts could transfer with the records a buyer needs in order to continue the work. If that situation arose, we would require the recipient to use the data for the same purposes. Nothing on this website announces such a transaction, and this sentence is an explanation of a possible future step, not a statement that one is underway.

11. Transfers outside the United Kingdom

NEUVEX LTD is based in the United Kingdom, and we intend correspondence to be handled in the United Kingdom. Some infrastructure that delivers email or hosting may involve processing in another country, depending on the provider. Where personal data is transferred outside the United Kingdom, we rely on a lawful transfer mechanism. That may be a UK adequacy regulation, which recognises a country’s protection as sufficient, or an appropriate safeguard such as the International Data Transfer Agreement or the Addendum to the EU standard contractual clauses, together with any transfer risk assessment that the law requires.

You may ask us whether a particular enquiry has been sent outside the United Kingdom and, where a safeguard is in use, for a description of it. Some detail of a supplier contract may be confidential, but we will explain the mechanism in terms you can understand. We do not transfer enquiry data to a country simply because a tool is convenient, if we cannot point to a lawful basis for the transfer.

12. How long we keep information

We keep an enquiry, and the thread that follows it, for as long as we need it to respond and to keep an accurate record of what was asked. As a general rule for website enquiries that do not become a contract, we keep the correspondence for up to twenty-four months after our last message in that thread. That period lets us answer a follow-up that refers to the earlier note, and it is short enough that an unanswered approach does not sit in a mailbox indefinitely. We may delete sooner if the message was clearly misdirected or if you ask us to erase it and we have no remaining reason to keep it.

If the enquiry becomes a contract, we keep the contractual records for the life of the work and then for up to six years after it ends, which aligns with the ordinary period in which a contractual claim can be brought in England and Wales. Where a tax or accounting rule requires a longer or a specific period, we follow that rule for the records it covers. Technical server logs are kept for the shorter period the host uses for operations and security, and not as a marketing archive.

The local storage item remains on your device until you clear it or until the browser removes it. We do not hold a copy of that acknowledgement on our server as a list of visitors. When a retention period ends, we delete the material or anonymise it so that it no longer identifies a person. Back-up copies may persist for a short further period until the back-up cycle overwrites them. We do not restore a back-up in order to revive data that has passed its retention period, except where we must recover from an incident and the restoration is temporary.

13. Security

We take steps that are appropriate to a business website and a professional mailbox. The form is sent over the connection your browser makes to the site. Validation rejects empty or malformed submissions before they are treated as enquiries. Mailbox access is limited to the people who need it. We do not publish enquiry content on the website.

No method of transmission or storage is perfectly secure. You should not send passwords, full card numbers, or highly sensitive personal data through the form. If we become aware of a personal data breach that is likely to result in a risk to you, we will notify the ICO where the law requires it, and we will notify you where the law requires us to do so. A technical error that stops a message from sending, and which the form reports back to you, is a delivery failure, not by itself a breach. In that case the page asks you to email info@neuvex.live directly.

14. Your rights

If the UK GDPR applies to our handling of your personal data, you have rights. They are not absolute. They depend on the reason we hold the data. We will respond to a request within one month, or we will tell you if we need a further two months because the request is complex, and we will explain why. We may ask for information to confirm that you are the person the data is about, or that you are allowed to act for them. We will not ask for more identification than the request requires.

Access

You may ask whether we are processing your personal data and, if we are, for a copy of it and for certain information about the processing. That information includes the purposes, the categories of data, the recipients or categories of recipient, the retention period or the criteria we use, and the existence of your other rights. If you want a copy of an enquiry you sent, say so and give us the email address you used. We will not hand over another person’s data in the course of answering you, except where that data is also yours or where we can separate it.

Correction

You may ask us to correct inaccurate personal data and to complete data that is incomplete. A message you wrote is a record of what was sent. We will correct contact details that are wrong, such as a misspelled email address, where you tell us the right one. We will not rewrite the historical text of your message so that it says something you did not send, but we will add a correction alongside it where that is the fair way to record the change.

Erasure

You may ask us to delete personal data in certain cases. Those cases include where we no longer need it for the purpose we collected it, where you object to legitimate-interest processing and we have no overriding ground, where we have been relying on consent and you withdraw it, or where the data has been processed unlawfully. We may refuse where we need the data to comply with a legal obligation or to establish, exercise, or defend a legal claim. If we refuse, we will explain the reason.

Restriction

You may ask us to restrict processing in certain cases: while we check accuracy that you have contested, where the processing is unlawful and you prefer restriction to deletion, where we no longer need the data but you need it for a legal claim, or while we consider an objection. Restricted data is stored and not otherwise used, except with your consent, for legal claims, to protect another person, or for reasons of important public interest.

Portability

Where processing is based on consent or on a contract, and is carried out by automated means, you may ask for the personal data you provided to us, in a structured, commonly used, machine-readable format, and you may ask us to transmit it to another controller where that is technically feasible. An email enquiry is mostly text you composed. We can provide that text. Portability does not require us to hand over our own analysis or notes that we created and that are not data you provided.

Objection

You may object to processing based on legitimate interests, on grounds relating to your particular situation. We will stop unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or unless we need the data for legal claims. You may also object to direct marketing at any time. We do not use website enquiries for direct marketing, so there is no marketing list to remove you from. If you receive a message from us that you did not expect, tell us and we will look at how it was sent.

You will not be subject to a decision based solely on automated processing, including profiling, that produces a legal effect or a similarly significant effect, because we do not make those decisions with website data. If that ever changed, we would tell you, and you would have the rights the law gives in that situation, including the right to obtain human intervention.

15. How to use your rights

Write to info@neuvex.live with the subject line Privacy request, or call +44 7781 492018 and say that the call is about personal data. Tell us what you want, and the email address or telephone number you used so that we can find the right thread. If you are acting for someone else, tell us your authority to do so. We do not charge a fee for a reasonable request. We may charge a reasonable fee, or refuse, if a request is manifestly unfounded or excessive, which the law allows. We will tell you if we take that view.

If we sent your data to a recipient and you then obtain rectification, erasure, or restriction, we will tell that recipient unless doing so is impossible or involves disproportionate effort. You may ask us who those recipients are.

16. Children

This website is aimed at businesses and at adults who make decisions about software and consulting. It is not directed at children, and we do not knowingly collect personal data from a person under 18 through the form. If you believe a child has sent us personal data, email info@neuvex.live and we will delete it unless a law requires us to keep it. Services such as custom software programming and IT consulting are not offered to children as customers of this site.

17. Links and tools that are not ours

A page may link to a page of this same site, or, where we refer to a public authority such as the ICO, to that authority’s site. If you leave neuvex.live, the other site’s privacy policy applies. We do not control it. The fonts used to display these pages are requested from Google Fonts when your browser loads the typefaces named in the page. That request is made so that the page can be read in the intended type. It is a request to Google’s font service, and Google’s own privacy information describes what that service does. If you prefer not to make that request, your browser may be set to block third-party requests, and the page will fall back to other typefaces already on your device. The words of the site remain available either way.

18. Changes to this policy

We will change this policy if our practices change, or if the law changes in a way that should be reflected here. The date at the top of the page is the date of the current version. The current version is the one published at https://neuvex.live/privacy-policy.html. If a change would affect a person we are already corresponding with in a significant way, we will draw it to their attention in that correspondence, not only by changing the page. Older enquiries remain governed, for the data already collected, by the explanation that was fair at the time, except where the law requires a new rule to apply.

19. How this policy sits with client work

NEUVEX LTD’s services include custom software programming, computer systems design, IT consulting and advisory, enterprise software engineering, software architecture design, technical and scientific consulting, custom web and mobile app development, API and systems integration, legacy system modernization, cloud solutions and migration, dedicated development teams, and software maintenance and support. A client engagement may involve personal data that belongs to the client’s staff, customers, or suppliers. In that case the client usually decides why that data is processed and by what means, and NEUVEX LTD follows the client’s documented instructions for the work in scope. This website policy does not replace a data processing schedule in a client contract. If you need that schedule, ask for it when the statement of work is prepared. We will not pretend that a public webpage is the contract.

Questions about this policy can be sent to info@neuvex.live or by post to NEUVEX LTD, Unit 82a James Carter Road, Mildenhall, Bury St. Edmunds, IP28 7DE, United Kingdom. Please write Privacy in the subject line so that the message is read with this policy in mind.